mv logout.php to /user